aa2470b3f72143cebfaf3d50ae6b31a8092de52e5a7b05a7ff475625d0897a2d

Sharing

Copy URL Twitter E-mail

General

Target

aa2470b3f72143cebfaf3d50ae6b31a8092de52e5a7b05a7ff475625d0897a2d
Size

10.9MB
MD5

88a84dfd896510c6562494ccc5004901
SHA1

af604022efe66159c2860c9439b56063451aa92c
SHA256

aa2470b3f72143cebfaf3d50ae6b31a8092de52e5a7b05a7ff475625d0897a2d
SHA512

62e1875530bd0a2b079da169cbcfa968a48afeeca5dfee853bb85429770a8c81d43db48a8f23918a5de019f56e3453e3f660039d88c2baef27f607579d24dcab
SSDEEP

196608:EavXeFM3SFrZ/u0lUr7MqxycHaP8tbiaFiRy1MghhVq4oQk7ihk934QdVMBCz3gG:XF3SFwn750c6PwFiu77kNiY46ECz3gW/

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2470b3f72143cebfaf3d50ae6b31a8092de52e5a7b05a7ff475625d0897a2d

Files

aa2470b3f72143cebfaf3d50ae6b31a8092de52e5a7b05a7ff475625d0897a2d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.5MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 189KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8.3MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msvcjmc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 673KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.5MB - Virtual size: 7.2MB

.rdata Size: 189KB - Virtual size: 2.3MB

.data Size: 8.3MB - Virtual size: 13.4MB

.idata Size: 9KB - Virtual size: 28KB

.msvcjmc Size: 512B - Virtual size: 4KB

.tls Size: 1024B - Virtual size: 4KB

.00cfg Size: 512B - Virtual size: 4KB

.rsrc Size: 673KB - Virtual size: 1.8MB

.aspack Size: 132KB - Virtual size: 132KB

.adata Size: - Virtual size: 4KB

.text
Size: 1.5MB - Virtual size: 7.2MB

.rdata
Size: 189KB - Virtual size: 2.3MB

.data
Size: 8.3MB - Virtual size: 13.4MB

.idata
Size: 9KB - Virtual size: 28KB

.msvcjmc
Size: 512B - Virtual size: 4KB

.tls
Size: 1024B - Virtual size: 4KB

.00cfg
Size: 512B - Virtual size: 4KB

.rsrc
Size: 673KB - Virtual size: 1.8MB

.aspack
Size: 132KB - Virtual size: 132KB

.adata
Size: - Virtual size: 4KB